Lucene search
+L

312 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 3:30 p.m.•20 views

CVE-2020-29436

Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to configure the system to gain access to content outside of NXRM via an XXE vulnerability. Fixed in version 3.29.0...

6.5CVSS7AI score0.015EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 8:22 a.m.•20 views

CVE-2019-15893

Sonatype Nexus Repository Manager 2.x before 2.14.15 allows Remote Code Execution...

7.2CVSS7.3AI score0.02061EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:35 a.m.•16 views

CVE-2019-15588

There is an OS Command Injection in Nexus Repository Manager = 2.14.14 bypass CVE-2019-5475 that could allow an attacker a Remote Code Execution RCE. All instances using CommandLineExecutor.java with user-supplied data is vulnerable, such as the Yum Configuration Capability...

9CVSS7.8AI score0.18396EPSS
SaveExploits6References1
BDU FSTEC
BDU FSTEC
•added 2024/12/09 12:00 a.m.•17 views

The vulnerability of Sonatype Nexus Repository Manager relates to the lack of measures taken to protect the website structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of Sonatype Nexus Repository Manager is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks by publishing Maven artifacts...

5.5CVSS5.2AI score0.00413EPSS
SaveExploits0References5Affected Software1
CNNVD
CNNVD
•added 2024/11/13 12:00 a.m.•15 views

Sonatype Nexus Repository Manager 跨站脚本漏洞

Sonatype Nexus Repository Manager NXRM is a repository manager from Sonatype, Inc. that is used for managing, storing, and distributing software, among other things. A cross-site scripting vulnerability exists in Sonatype Nexus Repository Manager version 2.15.1 and earlier, which stems from the...

5.1CVSS6AI score0.00413EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/07/05 12:00 a.m.•12 views

The vulnerability of Sonatype Nexus Repository Manager lies in the improper restriction of the path name to the restricted directory. This allows attackers to disclose protected information.

The vulnerability of Sonatype Nexus Repository Manager is related to incorrect restrictions on the path to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

7.8CVSS7.7AI score0.18245EPSS
SaveExploits16References5Affected Software1
GithubExploit
GithubExploit
•added 2024/06/09 10:57 a.m.•590 views

Exploit for CVE-2024-4956

CVE-2024-4956 !My Shophttps://img.shields.io/badge/My%20S...

7.5CVSS7.7AI score0.18245EPSS
SaveExploits16
GithubExploit
GithubExploit
•added 2024/05/30 8:04 a.m.•447 views

Exploit for CVE-2024-4956

CVE-2024-4956-Sonatype-Nexus-Repository-Manager Sonatype Ne...

7.5CVSS7.5AI score0.18245EPSS
SaveExploits16
GithubExploit
GithubExploit
•added 2024/05/28 3:05 p.m.•69 views

Exploit for CVE-2024-4956

CVE-2024-4956 : Nexus Repository Manager 3 Dork: - Shodan:...

7.5CVSS7AI score0.18245EPSS
SaveExploits16
GithubExploit
GithubExploit
•added 2024/05/24 12:45 p.m.•91 views

Exploit for CVE-2024-4956

CVE-2024-4956 - Unauthenticated Path Traversal in Nexus Reposi...

7.5CVSS6.9AI score0.18245EPSS
SaveExploits16
GithubExploit
GithubExploit
•added 2024/05/23 6:47 a.m.•61 views

Exploit for CVE-2024-4956

CVE-2024-4956 Nexus Reposito...

7.5CVSS8.7AI score0.18245EPSS
SaveExploits16
GithubExploit
GithubExploit
•added 2024/05/23 6:47 a.m.•107 views

Exploit for CVE-2024-4956

CVE-2024-4956 Nexus Reposito...

7.5CVSS8.7AI score0.18245EPSS
SaveExploits16
CNNVD
CNNVD
•added 2024/05/16 12:00 a.m.•12 views

Sonatype Nexus Repository 安全漏洞

Nexus Repository Manager is a repository management system. A path traversal vulnerability exists in Sonatype Nexus Repository Manager that can be exploited by an attacker to obtain sensitive information...

7.5CVSS6.6AI score0.18245EPSS
SaveExploits16References4
SUSE CVE
SUSE CVE
•added 2023/02/15 4:14 a.m.•16 views

SUSE CVE-2019-9629

Sonatype Nexus Repository Manager before 3.17.0 establishes a default administrator user with weak defaults fixed credentials...

9.8CVSS9.5AI score0.0146EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2023/02/15 12:00 a.m.•14 views

The vulnerability of Sonatype Nexus Repository Manager lies in the lack of measures to clean input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of Sonatype Nexus Repository Manager is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS7.7AI score0.05602EPSS
SaveExploits4References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/07/01 12:00 a.m.•16 views

The vulnerability of Sonatype Nexus Repository Manager relates to insecure management of privileges, allowing a perpetrator to execute arbitrary code.

The vulnerability of Sonatype Nexus Repository Manager is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

10CVSS8.4AI score0.77146EPSS
SaveExploits5References3Affected Software1
OSV
OSV
•added 2022/05/24 4:59 p.m.•48 views

GHSA-HMJV-PX3J-933C Unrestricted Upload of File with Dangerous Type in Sonatype Nexus Repository Manager

Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution...

7.2CVSS7.3AI score0.03343EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2022/05/24 4:59 p.m.•38 views

Unrestricted Upload of File with Dangerous Type in Sonatype Nexus Repository Manager

Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution...

9CVSS2.4AI score0.03343EPSS
SaveExploits0References4Affected Software1
attackerkb
attackerkb
•added 2022/03/30 4:15 p.m.•7 views

CVE-2022-27907

Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF...

4.3CVSS5.9AI score0.00702EPSS
SaveExploits0References3
NVD
NVD
•added 2022/03/30 4:15 p.m.•38 views

CVE-2022-27907

Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF...

4.3CVSS0.00702EPSS
SaveExploits0References2
Rows per page
Query Builder